Introduction
At OneNoughtOne, we take your privacy seriously. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform and services. Please read this policy carefully to understand our practices regarding your personal data.
This policy covers the OneNoughtOne website at onenoughtone.com, our Android application, installed web app and OneNoughtOne Job Assistant. Optional integrations and sensitive application answers have their own choices; using the platform does not authorize every optional data use.
Information We Collect
We collect several types of information from and about users:
Information You Provide:
- Account information (name, email address, password)
- Profile information (display name, avatar, bio)
- Payment information (processed securely through our payment providers)
- User-generated content (code solutions, notes, comments)
- Communications with us (support requests, feedback)
Information Collected Automatically:
- Usage data (pages visited, features used, time spent)
- Device information (browser type, operating system, device identifiers)
- Log data (IP address, access times, referring URLs)
- Learning progress and performance data
How We Use Your Information
We use the information we collect to:
- Provide, maintain, and improve our Services
- Process transactions and send related information
- Send you updates, security alerts, and support messages
- Personalize your learning experience and recommend content
- Track your progress and provide performance insights
- Analyze usage patterns to improve our platform
- Detect, prevent, and address technical issues and fraud
- Comply with legal obligations
Website visits and feature use
We use Google Analytics to understand how people find and use OneNoughtOne, improve performance and see which features help learners. Measurement covers public pages and signed-in areas, including Reading, resumes, hiring and assessments. We also measure successful registration and the first observed practice action in a browser.
We send public page identities and broad categories for private areas and practice. We do not send email addresses, account identifiers, names, code, document contents, messages, assessment answers, query strings or private workspace URLs to Google Analytics. Google receives browser identifiers and technical information about your device and connection. Advertising signals and enhanced automatic interaction measurement are disabled. Google processes this information under its Privacy Policy. Analytics cookies can last up to 180 days.
There is no analytics preference pop-up. Measurement loads automatically unless a previous refusal in this browser or a supported browser privacy signal blocks it. We respect Global Privacy Control and Do Not Track. You can also use browser privacy settings or Google’s Analytics opt-out add-on. Blocking analytics does not restrict learning or practice, and does not erase reports already received by Google. Reports may therefore omit some visits and do not count all registered learners. See our Cookie Policy for details. Essential authentication, service security and operational monitoring are separate.
Private Reading documents
When you upload a PDF to Reading, we store the original document in private storage, together with its title, description, file size, integrity hash, page count and a first-page preview. Your reading position, notes, annotations and document conversations are saved to your account.
Uploads are private by default. There is no public document catalogue. An owner can grant access to specific accounts with verified email addresses; readers must sign in. Owners can see the names and email addresses of their authorized readers, but each reader’s notes and conversations stay private. Forwarding a link does not authorize another account.
Owners can remove a reader or delete a document. Removal blocks future document and document-AI access; it cannot recall copies already downloaded. Original PDFs and previews are removed through our storage cleanup process after deletion. These pages and files are excluded from our sitemaps and carry instructions against search indexing.
If you request AI help, the selected passages and your request are sent to the configured AI service to answer that request. Merely uploading a PDF does not send the whole document to the AI service. Upload and share only material you are entitled to store or share.
Optional Telegram digests and job alerts
Our public Telegram channels share selected published current-affairs highlights and public job listings. Joining a channel does not subscribe your OneNoughtOne account to private alerts. Channel posts are public on Telegram and may be forwarded.
If you start our jobs bot, we process your commands and save your private Telegram chat identifier and the job filters you choose, such as role, country or city, work arrangement and experience. Personal daily alerts begin only when you enable them. We save consent and delivery progress to operate the service and prevent repeated posts. These filters are independent of your account and do not require your resume, password, demographic answers or private application details. We do not use an AI model to process bot commands or generate the digests.
Use /filters to change your preferences, /pause to pause alerts, or /stop or /delete to unsubscribe and remove your saved preferences and personal delivery records. The unsubscribe confirmation is retained in our delivery queue for up to 24 hours. Ordinary command replies expire after 24 hours, update identifiers used to reject retries after three days, and personal digest records after three days. Unfinished setup without opt-in expires after 30 days. We do not retain a Telegram conversation transcript. Necessary encrypted recovery copies follow the backup retention below and are not used to resume deleted subscriptions.
Telegram receives the messages and processes your use of its services under its own privacy policy. Unsubscribing from our bot does not remove messages already delivered to Telegram or its public channel history. You can also block the bot or leave the channels in Telegram.
Google sign-in and Google Calendar data
Sign in with Google. When you choose Google sign-in, we receive your Google account identifier, email address, verification status, name and profile picture when supplied. We store the account link and profile information to create your OneNoughtOne account, authenticate you and display your profile. Google sign-in does not grant access to Gmail, Google Drive or your calendar.
Optional calendar connection. Authorized hiring team members can separately connect Google Calendar for interview scheduling. With your consent, we access your calendar list and ownership/access details to let you select an owned calendar; free/busy periods to find available times; and interview event details needed to create, reschedule and cancel interviews on that calendar. Those details include interview titles, descriptions, times, attendee email addresses, event identifiers and conference links where available. We also access the connected Google account email to identify the calendar connection.
We store the selected calendar identifier and label, scheduling preferences, connection status, encrypted access and refresh tokens, and interview/event references in our server database. Tokens let the scheduling worker perform approved interview changes when you are offline; they are not exposed to candidates or other organizations. Relevant interview details are shared with invited attendees, the authorized hiring team and Google Calendar to provide scheduling. Availability is used for scheduling, not advertising. Calendar access does not give the resume or learning AI access to your calendar or email.
Limited Use. OneNoughtOne’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements. We do not sell Google user data, use it for personalized advertising, creditworthiness or lending, or use Google Workspace API data to develop, improve or train generalized AI or machine-learning models. Access is limited to the features you request and necessary service operation, security and legal purposes. Human access is restricted to those purposes and permitted support with consent where required.
Your controls. Calendar connection is optional. Disconnect it in the hiring calendar settings; active interviews and pending calendar changes must first be cancelled or completed. Disconnecting removes stored credentials and stops new access through that connection. You can also revoke access in your Google Account connections. Revocation does not erase events already placed in an attendee’s calendar. To delete your OneNoughtOne account and linked profile data, follow the account deletion instructions or contact the monitored address below. Interview records, necessary audit records and encrypted recovery copies follow the retention section below.
Learning, documents, voice and hiring assessments
We store the learning progress, practice submissions, code, drawings, quizzes, notes and uploaded reading material needed for features you use. Resume and application tools store the professional history, preferences, documents and answers you supply. Sensitive demographic answers are optional; we do not infer them for you or include them in resume-writing AI requests.
When you request an AI feature, relevant prompts, conversation history, selected learning material, workspace code or professional facts are sent to the configured AI service to answer that request. AI providers process the request under their own applicable terms. Avoid including unrelated confidential information. Voice features may use your browser or device speech services to transcribe speech and speak responses; availability and processing depend on the browser. Microphone and camera permission is requested before those features operate.
For hiring assessments that require recording, the pre-assessment notice explains camera/microphone recording, upload status, activity tracking and retention. The hiring team may require screen recording for a round, or a candidate may explicitly opt in when it is optional. The browser asks the candidate to select a screen, window or tab; OneNoughtOne does not silently capture another surface or request system audio. The selected surface, camera inset and microphone are combined into the same private recording. Candidates should close unrelated content and notifications before sharing. Sharing interruptions are disclosed in the activity timeline. Contact the hiring team before starting if you need an alternative. The hiring organization can review the submitted answers, evaluations, recordings and disclosed activity events. The hiring team chooses a recording retention period of 7, 14, 30, 60 or 90 days after the assessment deadline, shown before consent; recordings are then scheduled for automatic deletion. Recording and activity evidence supports human review; it is not a promise that cheating or identity can be determined automatically.
OneNoughtOne Job Assistant for Chrome
The Job Assistant connects your Chrome browser to your OneNoughtOne account to prepare and complete applications you authorize. It handles connection identifiers, saved contact and professional details, selected resumes and cover letters, application answers, approved employer URLs, relevant form questions and options, and application progress and outcomes. Answers may include salary expectations, work authorization and country preferences. Demographic choices are optional and may be saved privately for matching questions and country contexts.
The assistant places your selected answers and files in the employer's application form. Submitting sends them to that employer and its application provider, whose privacy notices govern their copies. OneNoughtOne receives the requests and workflow records needed to manage your approved application and its outcome. Infrastructure providers process information needed to operate these features.
Optional AI drafting sends selected professional facts, the job description and application questions to the provider identified in the interface when you choose an AI drafting or rewriting action. Account passwords, browser authentication cookies, contact fields and local attachment bytes are excluded from that drafting payload. Review generated wording before use. Recurring applications use approved saved answers without generating new wording.
The extension does not read unrelated browsing history, employer passwords or browser authentication cookies. A revocable connection credential and minimal recovery settings stay in trusted extension-local storage; short-lived application details use extension-session storage. A browser connection lasts up to 30 days unless revoked or expired earlier. Browser storage is not an encrypted vault. Server-persisted private answers, documents and uploaded originals use application encryption and access controls. Production network requests use HTTPS.
You can pause applications, revoke a browser connection, remove saved answers and delete documents using the account controls. Uninstalling the extension does not delete data already saved in your account or applications already sent to employers. Server records and backups follow this policy's retention provisions; employers control their own copies.
Our handling of information received through the Job Assistant follows the Chrome Web Store User Data Policy, including its Limited Use requirements. Assistant-derived data is not sold, used for personalized advertising or unrelated purposes, or used for creditworthiness or lending decisions. Transfers support the disclosed features, user-authorized applications, security and legal obligations. Human access is limited to the policy's permitted support, security, legal and aggregated operational purposes, with consent where required. The website's general advertising practices do not authorize advertising use of assistant data.
AI Job Matching
AI job matching is optional and off by default. If you enable it in your job preferences, we send selected professional work, skills, education, credentials, projects and career targets, together with public job descriptions, to TypeSafe AI’s Jev service to compare relevance.
Account contact fields, saved application answers, demographic choices, work authorization and hiring interview records are excluded from these requests. We remove recognizable emails, web links and phone numbers from selected text; avoid including unrelated personal or confidential information in professional descriptions.
We cache numeric comparisons for up to seven days and refresh them when the supplied profile or job changes. Turning AI matching off deletes these cached comparisons and stops new requests. Your profile-based recommendations remain available. TypeSafe processes requests under its privacy policy; turning off this feature does not recall a request already sent.
Institutional Learning
If you accept a school, college or university invitation, the institution’s administrator can see your enrollment name, email address, role and cohort to manage its subscription seats.
Learning progress sharing is optional and off by default. If you opt in, institutional administrators and educators can see completion counts, learning days and recent activity recorded after you joined and opted in. Withdrawing sharing hides your progress from these reports. Opting in again starts a new sharing period.
Institutional reports do not include your private notes, code, AI conversations, resumes or hiring records. Your personal account and learning history stay with you when you leave the institution or its subscription ends. Existing account age and guardian-permission requirements continue to apply.
Advertising
We use Google AdSense on selected content pages for guests and free users. Users with active paid access do not receive these ads. Google and its advertising partners may collect device information, IP addresses, and browsing activity and use cookies or similar technologies to serve, personalize, and measure advertising, including ads based on visits to this and other websites.
Learn how Google uses information from partner sites and manage personalized advertising in Google My Ad Center. See our Cookie Policy for browser cookie controls.
Data Security
We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:
- HTTPS for production traffic and encrypted private documents, saved application answers and calendar credentials
- Isolated execution environments, restricted storage access and encrypted recovery backups
- Access controls and authentication measures
- Restricted administrative access and operational monitoring
However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your personal information, we cannot guarantee its absolute security.
Your Rights & Choices
Depending on your location, you may have the following rights:
- Access: Request a copy of your personal data
- Correction: Request correction of inaccurate data
- Deletion: Request deletion of your personal data
- Portability: Request a copy of your data in a portable format
- Opt-out: Unsubscribe from marketing communications
- Restrict Processing: Request limitation of processing
Use your account settings to manage saved information, or follow our account deletion instructions. For assistance, contact anshik@onenoughtone.com. We will respond to your request within 30 days.
Data Retention
We retain your personal information for as long as your account is active or as needed to provide you services. We may also retain certain information as required by law or for legitimate business purposes, such as:
- Resolving disputes and enforcing our agreements
- Complying with legal obligations
- Maintaining security and preventing fraud
When you delete your account, we delete or anonymize associated personal information within 90 days, except records needed for legal obligations, payment disputes or abuse prevention. Deleted information may remain temporarily in encrypted recovery backups until those recovery points expire; backup copies are restricted to recovery and are not used as active user profiles. Removing an account does not withdraw applications already sent to employers or erase records that another organization must retain.
International Data Transfers
Your information may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws.
Our hosting, storage, email, payment, diagnostics and AI providers may process relevant information in different countries. We limit transfers to the information needed for the requested feature and service operation. Contact us to ask about a particular transfer.
Children's Privacy
Our Services are not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us and we will delete such information.
Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date.
We encourage you to review this Privacy Policy periodically for any changes. Your continued use of the Services after any modifications indicates your acceptance of the updated policy.
Contact Us
If you have any questions about this Privacy Policy or our data practices, please contact us at:
- Email: anshik@onenoughtone.com
- Website: onenoughtone.com/contact